LAUSANNE. Switzerland's highest court has drawn a firmer line around the quiet architecture of everyday surveillance, ruling that telecom providers may retain customer connection metadata for six months and no longer, unless a concrete and documented suspicion justifies an extension in an individual case.
The judgment, handed down by the Federal Supreme Court's public law division, settles a dispute that began when a Zurich internet provider challenged a cantonal order requiring it to keep subscriber and session data for twelve months as a matter of routine. The court found the longer period disproportionate and laid down a structured test that lower courts must now apply before approving any retention demand.
That test has three limbs. Authorities must show that the data sought is suitable for the investigative purpose, that no milder means would achieve the same result, and that the intrusion is balanced against the seriousness of the offence being pursued. Blanket retention for general crime prevention, the judges wrote, fails at the second limb.
The case turned on the interpretation of the Federal Act on the Surveillance of Post and Telecommunications, a statute revised in 2018 that left the permissible retention window deliberately vague. Federal police had argued that metadata loses its evidentiary value quickly but remains indispensable in terrorism and organised crime investigations, where leads often emerge months after the event.
Privacy advocates who joined the proceedings as interveners countered that Switzerland had drifted towards the kind of general stockpiling that the European Court of Justice struck down in its landmark rulings on data retention. Although Switzerland is not bound by that jurisprudence, the Lausanne judges acknowledged it as persuasive, noting that the Swiss Constitution protects private life in terms no narrower than the European Convention.
For providers, the practical consequences arrive quickly. Companies operating in Switzerland hold connection records for an estimated 11 million mobile subscriptions, and compliance systems built around the twelve month assumption must now be reconfigured. Two of the three largest carriers said they would complete the transition within ninety days; smaller regional operators asked for a longer grace period. Industry lawyers estimate the adjustment will cost the sector several million francs in systems work alone.
The Federal Prosecutor's Office reacted cautiously, saying it would adapt its requests but warning that complex financial investigations could suffer. A senior investigator at the office said: “We lose the ability to look back across a full year, and in money laundering cases that year is often where the pattern lives.” Officials added that cantonal police forces, which conduct most day-to-day surveillance requests, will need fresh training on the three-limb test before winter.
Criminal defence lawyers welcomed the ruling as overdue. The Swiss Bar Association noted that defence teams had long complained that retention orders were granted almost automatically, with judges rarely asking whether the data sought would actually advance the case. The new test, it said, forces that question into the open.
Civil liberties groups were more reserved, pointing out that six months of metadata still maps a person's movements, contacts and habits in fine detail. The Digital Society association said it would continue to press Parliament for a quick-freeze model, in which data is preserved only for named suspects once an investigation has formally begun. Its legal director noted that the court itself acknowledged metadata can reveal more about a life than the content of calls ever could.
The judgment takes effect immediately, though cases already before cantonal courts under the old practice will not be reopened. Legal scholars expect a wave of challenges to pending retention orders as defendants test the three-limb standard, and the Federal Council has signalled it may propose a legislative clarification if the case law produces inconsistent results.
Beyond telecoms, the ruling is likely to echo through every Swiss statute that authorises the preventive storage of personal data, from road toll records to border crossing logs. In drawing a proportionality line around one dataset, the court has handed litigants a template for contesting all the others.